Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
https://nt.embluemail.com/p/cl?data=3YZv0BlJbftfm9/Ve/nz8p/seVvfdz2Le2+1ZXk0LOjQU+QcnnZLoMMoa6mY23iqNfwKYtM500Jx312dmC8FWw==!-!5h1gq9!-!http://bandam.feedestend.com/#YmFuZGFtQHNhY2NvdW50eS5uZXQ=
|
URL
|
initial url
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{13E9910E-AD0D-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{13E99110-AD0D-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{13E99111-AD0D-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
|
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\RBDAB6LU.htm
|
HTML document, ASCII text
|
downloaded
|
||
C:\Users\user\AppData\Local\Temp\~DF537922E49D7A1954.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DF72F29D7590EB175C.TMP
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\~DFF14C111DD7FF8AC8.TMP
|
data
|
dropped
|
There are 7 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6464 CREDAT:17410 /prefetch:2
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://bandam.feedestend.com/#YmFuZGFtQHNhY2NvdW50eS5uZXQ=Root
|
unknown
|
||
http://bandam.feedestend.com/#YmFuZGFtQHNhY2NvdW50eS5uZXQ=
|
unknown
|
||
http://bandam.feedestend.com/#YmFuZGFtQHNhY2NvdW50eS5uZXQ=
|
|||
http://www.nytimes.com/
|
unknown
|
||
http://www.youtube.com/
|
unknown
|
||
http://bandam.feedestend.com/
|
20.185.236.167
|
||
http://bandam.feedestend.com/favicon.ico
|
20.185.236.167
|
||
http://www.wikipedia.com/
|
unknown
|
||
http://www.amazon.com/
|
unknown
|
||
http://www.live.com/
|
unknown
|
||
https://blencovents.net/o/
|
unknown
|
||
http://www.webtoolkit.info/
|
unknown
|
||
http://www.reddit.com/
|
unknown
|
||
http://www.twitter.com/
|
unknown
|
There are 4 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
bandam.feedestend.com
|
20.185.236.167
|
||
d-9z7gan7a2h.execute-api.sa-east-1.amazonaws.com
|
54.94.56.139
|
||
nt.embluemail.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
20.185.236.167
|
bandam.feedestend.com
|
United States
|
||
54.94.56.139
|
d-9z7gan7a2h.execute-api.sa-east-1.amazonaws.com
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files\internet explorer\iexplore.exe
|
{13E9910E-AD0D-11EB-90EB-ECF4BBEA1588}
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
||
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
||
C:\Program Files\internet explorer\iexplore.exe
|
CVListPingLastYMD
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
||
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-912
|
||
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
@C:\Windows\System32\ieframe.dll,-903
|
There are 16 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
20A19440000
|
unkown
|
page read and write
|
||
24C5D800000
|
unkown
|
page read and write
|
||
7FF5388B1000
|
unkown
|
page readonly
|
||
22D1B570000
|
unkown
|
page readonly
|
||
A6C6C7F000
|
unkown
|
page read and write
|
||
7FF5B287A000
|
unkown
|
page readonly
|
||
20A1B500000
|
unkown
|
page read and write
|
||
7FF5530C1000
|
unkown
|
page readonly
|
||
7FF5CE8A1000
|
unkown
|
page readonly
|
||
71D9EFD000
|
unkown
|
page read and write
|
||
25788854000
|
unkown
|
page read and write
|
||
2A3D6656000
|
unkown
|
page read and write
|
||
1AA9F570000
|
unkown
|
page read and write
|
||
7FF50A4E1000
|
unkown
|
page readonly
|
||
7FF509C4D000
|
unkown
|
page readonly
|
||
7FF5388B2000
|
unkown
|
page readonly
|
||
24C5F1A0000
|
unkown
|
page read and write
|
||
2A3D6550000
|
heap private
|
page read and write
|
||
22D19A3F000
|
unkown
|
page read and write
|
||
7FF538540000
|
unkown
|
page readonly
|
||
20A1942B000
|
unkown
|
page read and write
|
||
1AA9F68A000
|
unkown
|
page read and write
|
||
7FF5CE8A9000
|
unkown
|
page readonly
|
||
2A3D6649000
|
unkown
|
page read and write
|
||
24C5F2A0000
|
unkown
|
page readonly
|
||
14B6206B000
|
unkown
|
page read and write
|
||
7FF5B2820000
|
unkown
|
page readonly
|
||
320A2BB000
|
unkown
|
page read and write
|
||
20A193A0000
|
unkown
|
page readonly
|
||
7FF5CE4EC000
|
unkown
|
page readonly
|
||
7FF538839000
|
unkown
|
page readonly
|
||
14B62002000
|
unkown
|
page read and write
|
||
7FF552FD0000
|
unkown
|
page readonly
|
||
7FF5E7C4D000
|
unkown
|
page readonly
|
||
7FF5E7D6E000
|
unkown
|
page readonly
|
||
7FF5E7D0B000
|
unkown
|
page readonly
|
||
291ADC49000
|
unkown
|
page read and write
|
||
B7D797E000
|
unkown
|
page read and write
|
||
71D9A7E000
|
unkown
|
page read and write
|
||
14B6206C000
|
unkown
|
page read and write
|
||
7FF5CE898000
|
unkown
|
page readonly
|
||
2A3D65B0000
|
heap default
|
page read and write
|
||
7FF56EA38000
|
unkown
|
page readonly
|
||
7FF50A45E000
|
unkown
|
page readonly
|
||
7FF56EBF4000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF56EB50000
|
unkown
|
page readonly
|
||
14B61FD0000
|
unkown
|
page readonly
|
||
20A194A0000
|
unkown
|
page read and write
|
||
22D19970000
|
unkown
|
page write copy
|
||
7FF56EA09000
|
unkown
|
page readonly
|
||
7FF552FCE000
|
unkown
|
page readonly
|
||
7FF56EA79000
|
unkown
|
page readonly
|
||
1AA9F800000
|
unkown
|
page readonly
|
||
7FF56EA76000
|
unkown
|
page readonly
|
||
7FF56E411000
|
unkown
|
page readonly
|
||
291ADC48000
|
unkown
|
page read and write
|
||
7FF56E821000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF553049000
|
unkown
|
page readonly
|
||
71D9BFA000
|
unkown
|
page read and write
|
||
24C5D640000
|
heap private
|
page read and write
|
||
25788800000
|
unkown
|
page read and write
|
||
7FF5CE83B000
|
unkown
|
page readonly
|
||
7FF5B284B000
|
unkown
|
page readonly
|
||
7FF53881F000
|
unkown
|
page readonly
|
||
291AE402000
|
unkown
|
page read and write
|
||
7FF552FCA000
|
unkown
|
page readonly
|
||
7FF5B28C4000
|
unkown
|
page readonly
|
||
A6C687C000
|
unkown
|
page read and write
|
||
7FF5CE82E000
|
unkown
|
page readonly
|
||
22D19C00000
|
unkown
|
page readonly
|
||
7FF538828000
|
unkown
|
page readonly
|
||
25788840000
|
unkown
|
page read and write
|
||
1AA9F410000
|
heap private
|
page read and write
|
||
14B6206C000
|
unkown
|
page read and write
|
||
7FF5CE738000
|
unkown
|
page readonly
|
||
7FF5B288B000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF56EBFA000
|
unkown
|
page readonly
|
||
7FF5E7D5F000
|
unkown
|
page readonly
|
||
7FF5B277B000
|
unkown
|
page readonly
|
||
A09577C000
|
unkown
|
page read and write
|
||
7FF552F23000
|
unkown
|
page readonly
|
||
7FF5B296A000
|
unkown
|
page readonly
|
||
2A3D6E02000
|
unkown
|
page read and write
|
||
7FF50A0BA000
|
unkown
|
page readonly
|
||
14B62029000
|
unkown
|
page read and write
|
||
2A3D6708000
|
unkown
|
page read and write
|
||
20A19471000
|
unkown
|
page read and write
|
||
7FF5B2972000
|
unkown
|
page readonly
|
||
79BC0FF000
|
unkown
|
page read and write
|
||
1AA9F613000
|
unkown
|
page read and write
|
||
14B62068000
|
unkown
|
page read and write
|
||
14B62068000
|
unkown
|
page read and write
|
||
7FF56EA4A000
|
unkown
|
page readonly
|
||
7FF5B2822000
|
unkown
|
page readonly
|
||
7FF5B2658000
|
unkown
|
page readonly
|
||
7FF5CE868000
|
unkown
|
page readonly
|
||
24C5D829000
|
unkown
|
page read and write
|
||
7FF50A461000
|
unkown
|
page readonly
|
||
14B6206A000
|
unkown
|
page read and write
|
||
7FF56E903000
|
unkown
|
page readonly
|
||
22D19B02000
|
unkown
|
page read and write
|
||
7FF5386BB000
|
unkown
|
page readonly
|
||
14B62068000
|
unkown
|
page read and write
|
||
7FF50A3F5000
|
unkown
|
page readonly
|
||
7FF56EA2C000
|
unkown
|
page readonly
|
||
20A1B340000
|
unkown
|
page readonly
|
||
7FF552FDB000
|
unkown
|
page readonly
|
||
7FF5E73E1000
|
unkown
|
page readonly
|
||
7FF5530B4000
|
unkown
|
page readonly
|
||
7FF5E78C6000
|
unkown
|
page readonly
|
||
20A1B523000
|
unkown
|
page read and write
|
||
7FF5CE4FF000
|
unkown
|
page readonly
|
||
291ADC70000
|
unkown
|
page read and write
|
||
7FF5B2885000
|
unkown
|
page readonly
|
||
7FF5E7DF1000
|
unkown
|
page readonly
|
||
7FF5E7D68000
|
unkown
|
page readonly
|
||
7FF5CE655000
|
unkown
|
page readonly
|
||
7FF5CE914000
|
unkown
|
page readonly
|
||
291ADB80000
|
unkown
|
page readonly
|
||
22D19A13000
|
unkown
|
page read and write
|
||
7FF5B28AC000
|
unkown
|
page readonly
|
||
1AA9F550000
|
unkown
|
page readonly
|
||
7FF56EBE8000
|
unkown
|
page readonly
|
||
7FF56EA71000
|
unkown
|
page readonly
|
||
7FF5B28EE000
|
unkown
|
page readonly
|
||
1AA9F68D000
|
unkown
|
page read and write
|
||
24C5D6B0000
|
unkown
|
page readonly
|
||
291ADC3C000
|
unkown
|
page read and write
|
||
7FF56E859000
|
unkown
|
page readonly
|
||
7FF538663000
|
unkown
|
page readonly
|
||
7FF5B26C1000
|
unkown
|
page readonly
|
||
7FF56EAB3000
|
unkown
|
page readonly
|
||
A6C6F7F000
|
unkown
|
page read and write
|
||
7FF5B28F9000
|
unkown
|
page readonly
|
||
20A19502000
|
unkown
|
page read and write
|
||
20A1B310000
|
unkown
|
page read and write
|
||
90CBDE000
|
unkown
|
page read and write
|
||
90CEFA000
|
unkown
|
page read and write
|
||
14B63A70000
|
unkown
|
page read and write
|
||
291ADB90000
|
unkown
|
page read and write
|
||
7FF5530BA000
|
unkown
|
page readonly
|
||
2A3D6655000
|
unkown
|
page read and write
|
||
7FF5B28E8000
|
unkown
|
page readonly
|
||
A6C697E000
|
unkown
|
page read and write
|
||
7FF56EBB0000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF56E8E1000
|
unkown
|
page readonly
|
||
291ADD13000
|
unkown
|
page read and write
|
||
7FF5CE921000
|
unkown
|
page readonly
|
||
7FF56EC9A000
|
unkown
|
page readonly
|
||
A09587B000
|
unkown
|
page read and write
|
||
7FF5E7D2C000
|
unkown
|
page readonly
|
||
1AA9F600000
|
unkown
|
page read and write
|
||
7FF509C51000
|
unkown
|
page readonly
|
||
291ADED0000
|
unkown
|
page readonly
|
||
14B62113000
|
unkown
|
page read and write
|
||
2A3D6800000
|
unkown
|
page readonly
|
||
24C5DA00000
|
unkown
|
page readonly
|
||
291ADC4C000
|
unkown
|
page read and write
|
||
7FF50A2EB000
|
unkown
|
page readonly
|
||
7FF552FE7000
|
unkown
|
page readonly
|
||
7FF50A0AC000
|
unkown
|
page readonly
|
||
2A3D664B000
|
unkown
|
page read and write
|
||
7FF56E261000
|
unkown
|
page readonly
|
||
7FF5B254F000
|
unkown
|
page readonly
|
||
7FF56EB73000
|
unkown
|
page readonly
|
||
22D19CD0000
|
unkown
|
page readonly
|
||
7FF5CE8A6000
|
unkown
|
page readonly
|
||
14B63B70000
|
unkown
|
page readonly
|
||
7FF5CE85C000
|
unkown
|
page readonly
|
||
7FF5CE835000
|
unkown
|
page readonly
|
||
291ADB70000
|
unkown
|
page readonly
|
||
20A19514000
|
unkown
|
page read and write
|
||
A095AFE000
|
unkown
|
page read and write
|
||
25788802000
|
unkown
|
page read and write
|
||
7FF50A4D4000
|
unkown
|
page readonly
|
||
2578A1A0000
|
unkown
|
page read and write
|
||
7FF5CE4FA000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF56EC18000
|
unkown
|
page readonly
|
||
7FF5E7BE1000
|
unkown
|
page readonly
|
||
1AA9F480000
|
unkown
|
page readonly
|
||
291ADC8A000
|
unkown
|
page read and write
|
||
7FF50A2D1000
|
unkown
|
page readonly
|
||
7FF56EC29000
|
unkown
|
page readonly
|
||
1AA9F470000
|
heap default
|
page read and write
|
||
7FF56EA7D000
|
unkown
|
page readonly
|
||
7FF56E96B000
|
unkown
|
page readonly
|
||
22D19A02000
|
unkown
|
page read and write
|
||
20A1B502000
|
unkown
|
page read and write
|
||
2A3D6670000
|
unkown
|
page read and write
|
||
7FF56E7BB000
|
unkown
|
page readonly
|
||
7FF53880A000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF5CE091000
|
unkown
|
page readonly
|
||
24C5D913000
|
unkown
|
page read and write
|
||
7FF56ECA2000
|
unkown
|
page readonly
|
||
24C5D855000
|
unkown
|
page read and write
|
||
22D19B13000
|
unkown
|
page read and write
|
||
7FF5B28AF000
|
unkown
|
page readonly
|
||
291ADB60000
|
heap default
|
page read and write
|
||
7FF50A466000
|
unkown
|
page readonly
|
||
7FF56EBDF000
|
unkown
|
page readonly
|
||
7FF5CE830000
|
unkown
|
page readonly
|
||
24C5D813000
|
unkown
|
page read and write
|
||
24C5D7D0000
|
unkown
|
page readonly
|
||
2A3D6645000
|
unkown
|
page read and write
|
||
7FF5B2761000
|
unkown
|
page readonly
|
||
1AA9FE02000
|
unkown
|
page read and write
|
||
291ADC4B000
|
unkown
|
page read and write
|
||
79BBE7E000
|
unkown
|
page read and write
|
||
7FF5B285F000
|
unkown
|
page readonly
|
||
20A1B402000
|
unkown
|
page read and write
|
||
7FF56E87F000
|
unkown
|
page readonly
|
||
71D9D7F000
|
unkown
|
page read and write
|
||
2A3D6688000
|
unkown
|
page read and write
|
||
7FF5B263B000
|
unkown
|
page readonly
|
||
7FF55302F000
|
unkown
|
page readonly
|
||
25788829000
|
unkown
|
page read and write
|
||
7FF50A2F8000
|
unkown
|
page readonly
|
||
7FF552F1D000
|
unkown
|
page readonly
|
||
7FF5CE874000
|
unkown
|
page readonly
|
||
7FF5B2557000
|
unkown
|
page readonly
|
||
20A19600000
|
unkown
|
page readonly
|
||
7FF5E7CFE000
|
unkown
|
page readonly
|
||
7FF53883D000
|
unkown
|
page readonly
|
||
A0959F7000
|
unkown
|
page read and write
|
||
7FF5387F7000
|
unkown
|
page readonly
|
||
7FF5B26B6000
|
unkown
|
page readonly
|
||
7FF5E7D76000
|
unkown
|
page readonly
|
||
7FF56E976000
|
unkown
|
page readonly
|
||
7FF56EA5E000
|
unkown
|
page readonly
|
||
14B6206C000
|
unkown
|
page read and write
|
||
7FF56EBC7000
|
unkown
|
page readonly
|
||
7FF56EAF1000
|
unkown
|
page readonly
|
||
7FF55303E000
|
unkown
|
page readonly
|
||
7FF552BA5000
|
unkown
|
page readonly
|
||
7FF5B28F6000
|
unkown
|
page readonly
|
||
20A194E5000
|
unkown
|
page read and write
|
||
7FF5CE7F3000
|
unkown
|
page readonly
|
||
7FF5387AC000
|
unkown
|
page readonly
|
||
7FF50A0BF000
|
unkown
|
page readonly
|
||
B7D7E7E000
|
unkown
|
page read and write
|
||
A6C6E7E000
|
unkown
|
page read and write
|
||
7FF5E7DE4000
|
unkown
|
page readonly
|
||
9191EBB000
|
unkown
|
page read and write
|
||
25788750000
|
unkown
|
page readonly
|
||
7FF552FBA000
|
unkown
|
page readonly
|
||
24C5D900000
|
unkown
|
page read and write
|
||
7FF5E7C53000
|
unkown
|
page readonly
|
||
7FF5CE507000
|
unkown
|
page readonly
|
||
320A679000
|
unkown
|
page read and write
|
||
1AA9F63C000
|
unkown
|
page read and write
|
||
7FF50A41C000
|
unkown
|
page readonly
|
||
22D19A00000
|
unkown
|
page read and write
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF538611000
|
unkown
|
page readonly
|
||
7FF5388AA000
|
unkown
|
page readonly
|
||
7FF552D50000
|
unkown
|
page readonly
|
||
7FF56EAB8000
|
unkown
|
page readonly
|
||
20A1B533000
|
unkown
|
page read and write
|
||
291ADD08000
|
unkown
|
page read and write
|
||
7FF56EA2F000
|
unkown
|
page readonly
|
||
7FF5B286A000
|
unkown
|
page readonly
|
||
320A33E000
|
unkown
|
page read and write
|
||
20A19340000
|
heap default
|
page read and write
|
||
7FF50A1B6000
|
unkown
|
page readonly
|
||
20A1B310000
|
unkown
|
page read and write
|
||
7FF5B2646000
|
unkown
|
page readonly
|
||
7FF53870D000
|
unkown
|
page readonly
|
||
22D19A56000
|
unkown
|
page read and write
|
||
14B6206D000
|
unkown
|
page read and write
|
||
71D9CF9000
|
unkown
|
page read and write
|
||
7FF5B287E000
|
unkown
|
page readonly
|
||
7FF50A3FB000
|
unkown
|
page readonly
|
||
7FF56EA54000
|
unkown
|
page readonly
|
||
14B61F80000
|
unkown
|
page write copy
|
||
7FF50A428000
|
unkown
|
page readonly
|
||
7FF53872C000
|
unkown
|
page readonly
|
||
7FF55304D000
|
unkown
|
page readonly
|
||
20A19350000
|
unkown
|
page write copy
|
||
7FF56EBAE000
|
unkown
|
page readonly
|
||
7FF56EA68000
|
unkown
|
page readonly
|
||
7FF5387CB000
|
unkown
|
page readonly
|
||
20A19400000
|
unkown
|
page read and write
|
||
7FF5B28D4000
|
unkown
|
page readonly
|
||
7FF56EB52000
|
unkown
|
page readonly
|
||
20A192E0000
|
heap private
|
page read and write
|
||
7FF553014000
|
unkown
|
page readonly
|
||
2A3D663C000
|
unkown
|
page read and write
|
||
7FF5E78C0000
|
unkown
|
page readonly
|
||
7FF50A4DA000
|
unkown
|
page readonly
|
||
2A3D7340000
|
unkown
|
page readonly
|
||
2578A2A0000
|
unkown
|
page readonly
|
||
20A196D0000
|
unkown
|
page readonly
|
||
7FF5CE7D2000
|
unkown
|
page readonly
|
||
7FF50A249000
|
unkown
|
page readonly
|
||
7FF56E9D5000
|
unkown
|
page readonly
|
||
20A19413000
|
unkown
|
page read and write
|
||
7FF553007000
|
unkown
|
page readonly
|
||
B7D7C77000
|
unkown
|
page read and write
|
||
24C5D780000
|
unkown
|
page write copy
|
||
291ADC13000
|
unkown
|
page read and write
|
||
7FF56EC26000
|
unkown
|
page readonly
|
||
7FF5B2181000
|
unkown
|
page readonly
|
||
7FF552ECE000
|
unkown
|
page readonly
|
||
91923FF000
|
unkown
|
page read and write
|
||
24C5F5F0000
|
unkown
|
page read and write
|
||
25788700000
|
unkown
|
page write copy
|
||
7FF5CE85F000
|
unkown
|
page readonly
|
||
20A1B600000
|
unkown
|
page readonly
|
||
7FF5E7C6C000
|
unkown
|
page readonly
|
||
79BC07F000
|
unkown
|
page read and write
|
||
7FF56E25D000
|
unkown
|
page readonly
|
||
7FF5E7D37000
|
unkown
|
page readonly
|
||
7FF5B20DD000
|
unkown
|
page readonly
|
||
90CADB000
|
unkown
|
page read and write
|
||
7FF5B26B4000
|
unkown
|
page readonly
|
||
7FF5E73DB000
|
unkown
|
page readonly
|
||
7FF50A407000
|
unkown
|
page readonly
|
||
7FF5E7D05000
|
unkown
|
page readonly
|
||
7FF5E7DEA000
|
unkown
|
page readonly
|
||
22D19B00000
|
unkown
|
page read and write
|
||
A6C6B7B000
|
unkown
|
page read and write
|
||
7FF5387C5000
|
unkown
|
page readonly
|
||
7FF5E7D2F000
|
unkown
|
page readonly
|
||
2A3D6651000
|
unkown
|
page read and write
|
||
7FF56E40D000
|
unkown
|
page readonly
|
||
7FF552FBC000
|
unkown
|
page readonly
|
||
7FF56E825000
|
unkown
|
page readonly
|
||
2A3D65D0000
|
unkown
|
page readonly
|
||
7FF5E7BA3000
|
unkown
|
page readonly
|
||
22D19960000
|
heap default
|
page read and write
|
||
22D19900000
|
heap private
|
page read and write
|
||
7FF56EA05000
|
unkown
|
page readonly
|
||
20A193F0000
|
unkown
|
page read and write
|
||
7FF5CE651000
|
unkown
|
page readonly
|
||
7FF5CE733000
|
unkown
|
page readonly
|
||
14B6206A000
|
unkown
|
page read and write
|
||
7FF53882E000
|
unkown
|
page readonly
|
||
71D97AB000
|
unkown
|
page read and write
|
||
71D9C7F000
|
unkown
|
page read and write
|
||
7FF552F3C000
|
unkown
|
page readonly
|
||
291ADC02000
|
unkown
|
page read and write
|
||
7FF5CE884000
|
unkown
|
page readonly
|
||
14B62000000
|
unkown
|
page read and write
|
||
291ADC5D000
|
unkown
|
page read and write
|
||
7FF50A3F0000
|
unkown
|
page readonly
|
||
20A194BD000
|
unkown
|
page read and write
|
||
14B6206E000
|
unkown
|
page read and write
|
||
7FF50A3B3000
|
unkown
|
page readonly
|
||
7FF552B96000
|
unkown
|
page readonly
|
||
7FF5387BE000
|
unkown
|
page readonly
|
||
14B61F10000
|
heap private
|
page read and write
|
||
7FF5E7D7D000
|
unkown
|
page readonly
|
||
2A3D6613000
|
unkown
|
page read and write
|
||
7FF56EAEA000
|
unkown
|
page readonly
|
||
7FF538836000
|
unkown
|
page readonly
|
||
7FF5CE82A000
|
unkown
|
page readonly
|
||
2A3D6654000
|
unkown
|
page read and write
|
||
7FF56EBDC000
|
unkown
|
page readonly
|
||
22D19A6B000
|
unkown
|
page read and write
|
||
7FF538395000
|
unkown
|
page readonly
|
||
7FF5387C0000
|
unkown
|
page readonly
|
||
7FF552FFF000
|
unkown
|
page readonly
|
||
20A193E0000
|
unkown
|
page readonly
|
||
7FF5387AA000
|
unkown
|
page readonly
|
||
14B62200000
|
unkown
|
page readonly
|
||
7FF5CE72B000
|
unkown
|
page readonly
|
||
7FF50A2F3000
|
unkown
|
page readonly
|
||
7FF56E908000
|
unkown
|
page readonly
|
||
1AA9F670000
|
unkown
|
page read and write
|
||
A6C68FF000
|
unkown
|
page read and write
|
||
1AA9F624000
|
unkown
|
page read and write
|
||
291AE940000
|
unkown
|
page readonly
|
||
7FF56E9C3000
|
unkown
|
page readonly
|
||
7FF552F34000
|
unkown
|
page readonly
|
||
7FF50A44E000
|
unkown
|
page readonly
|
||
7FF56E6CA000
|
unkown
|
page readonly
|
||
7FF5387EF000
|
unkown
|
page readonly
|
||
2A3D6600000
|
unkown
|
page read and write
|
||
24C5D802000
|
unkown
|
page read and write
|
||
20A1B51E000
|
unkown
|
page read and write
|
||
7FF5B26D9000
|
unkown
|
page readonly
|
||
7FF56EAE4000
|
unkown
|
page readonly
|
||
B7D78FE000
|
unkown
|
page read and write
|
||
7FF55301A000
|
unkown
|
page readonly
|
||
7FF552E21000
|
unkown
|
page readonly
|
||
20A19451000
|
unkown
|
page read and write
|
||
291ADD02000
|
unkown
|
page read and write
|
||
7FF5E7D4A000
|
unkown
|
page readonly
|
||
7FF5387BA000
|
unkown
|
page readonly
|
||
7FF50A41F000
|
unkown
|
page readonly
|
||
20A194C3000
|
unkown
|
page read and write
|
||
7FF5CE87A000
|
unkown
|
page readonly
|
||
7FF50A390000
|
unkown
|
page readonly
|
||
7FF5B284F000
|
unkown
|
page readonly
|
||
7FF5B27CD000
|
unkown
|
page readonly
|
||
7FF56E6BC000
|
unkown
|
page readonly
|
||
7FF5E7CEA000
|
unkown
|
page readonly
|
||
7FF56EC1E000
|
unkown
|
page readonly
|
||
7FF5B2854000
|
unkown
|
page readonly
|
||
20A194C3000
|
unkown
|
page read and write
|
||
7FF5386A1000
|
unkown
|
page readonly
|
||
7FF552D47000
|
unkown
|
page readonly
|
||
2A3D65E0000
|
unkown
|
page read and write
|
||
14B62068000
|
unkown
|
page read and write
|
||
14B622D0000
|
unkown
|
page readonly
|
||
7FF5B2897000
|
unkown
|
page readonly
|
||
90CB5F000
|
unkown
|
page read and write
|
||
A0953CE000
|
unkown
|
page read and write
|
||
7FF50A4E2000
|
unkown
|
page readonly
|
||
7FF56EAAB000
|
unkown
|
page readonly
|
||
A0958FE000
|
unkown
|
page read and write
|
||
1AA9F702000
|
unkown
|
page read and write
|
||
14B6206C000
|
unkown
|
page read and write
|
||
79BBBFB000
|
unkown
|
page read and write
|
||
7FF5B265F000
|
unkown
|
page readonly
|
||
2A3D6653000
|
unkown
|
page read and write
|
||
A09534B000
|
unkown
|
page read and write
|
||
71D9AFE000
|
unkown
|
page read and write
|
||
1AAA0000000
|
unkown
|
page readonly
|
||
14B6203F000
|
unkown
|
page read and write
|
||
7FF50A46D000
|
unkown
|
page readonly
|
||
14B62068000
|
unkown
|
page read and write
|
||
2A3D6700000
|
unkown
|
page read and write
|
||
2A3D6713000
|
unkown
|
page read and write
|
||
25788630000
|
unkown
|
page readonly
|
||
2A3D65C0000
|
unkown
|
page readonly
|
||
7FF56EBBB000
|
unkown
|
page readonly
|
||
90CE79000
|
unkown
|
page read and write
|
||
7FF50A211000
|
unkown
|
page readonly
|
||
7FF538537000
|
unkown
|
page readonly
|
||
25788620000
|
heap default
|
page read and write
|
||
71D9DFA000
|
unkown
|
page read and write
|
||
919237F000
|
unkown
|
page read and write
|
||
A6C6D77000
|
unkown
|
page read and write
|
||
7FF538380000
|
unkown
|
page readonly
|
||
7FF553038000
|
unkown
|
page readonly
|
||
2A3D664E000
|
unkown
|
page read and write
|
||
320A77F000
|
unkown
|
page read and write
|
||
291ADC29000
|
unkown
|
page read and write
|
||
7FF5CE88E000
|
unkown
|
page readonly
|
||
7FF56E86C000
|
unkown
|
page readonly
|
||
7FF5CE5EB000
|
unkown
|
page readonly
|
||
7FF5E7D17000
|
unkown
|
page readonly
|
||
7FF5E7A80000
|
unkown
|
page readonly
|
||
20A1B2B0000
|
heap private
|
page read and write
|
||
291AE600000
|
unkown
|
page readonly
|
||
7FF5CE91A000
|
unkown
|
page readonly
|
||
20A1B564000
|
unkown
|
page read and write
|
||
20A1B300000
|
unkown
|
page readonly
|
||
257885C0000
|
heap private
|
page read and write
|
||
22D199C0000
|
unkown
|
page readonly
|
||
24C5D902000
|
unkown
|
page read and write
|
||
7FF56E6D7000
|
unkown
|
page readonly
|
||
14B62013000
|
unkown
|
page read and write
|
||
7FF56E9A2000
|
unkown
|
page readonly
|
||
7FF552FFC000
|
unkown
|
page readonly
|
||
7FF5B28B7000
|
unkown
|
page readonly
|
||
7FF5B2880000
|
unkown
|
page readonly
|
||
7FF538386000
|
unkown
|
page readonly
|
||
7FF5E7BFE000
|
unkown
|
page readonly
|
||
7FF553024000
|
unkown
|
page readonly
|
||
9191F3F000
|
unkown
|
page read and write
|
||
7FF552FD5000
|
unkown
|
page readonly
|
||
2A3D68D0000
|
unkown
|
page readonly
|
||
7FF552B90000
|
unkown
|
page readonly
|
||
7FF5B26A1000
|
unkown
|
page readonly
|
||
291ADC2C000
|
unkown
|
page read and write
|
||
7FF56EC94000
|
unkown
|
page readonly
|
||
291ADE00000
|
unkown
|
page readonly
|
||
7FF538713000
|
unkown
|
page readonly
|
||
7FF50A458000
|
unkown
|
page readonly
|
||
7FF5CE922000
|
unkown
|
page readonly
|
||
291ADC47000
|
unkown
|
page read and write
|
||
7FF5CE5F6000
|
unkown
|
page readonly
|
||
79BBF7E000
|
unkown
|
page read and write
|
||
7FF56E6CF000
|
unkown
|
page readonly
|
||
14B6206C000
|
unkown
|
page read and write
|
||
7FF56E9FA000
|
unkown
|
page readonly
|
||
7FF50A43A000
|
unkown
|
page readonly
|
||
7FF5E7D54000
|
unkown
|
page readonly
|
||
7FF56E887000
|
unkown
|
page readonly
|
||
14B62052000
|
unkown
|
page read and write
|
||
B7D7A75000
|
unkown
|
page read and write
|
||
25788A00000
|
unkown
|
page readonly
|
||
20A19454000
|
unkown
|
page read and write
|
||
7FF5B2788000
|
unkown
|
page readonly
|
||
7FF56EA6E000
|
unkown
|
page readonly
|
||
7FF5E7DF2000
|
unkown
|
page readonly
|
||
20A1B310000
|
unkown
|
page read and write
|
||
20A194A2000
|
unkown
|
page read and write
|
||
7FF56E9A0000
|
unkown
|
page readonly
|
||
7FF56EA44000
|
unkown
|
page readonly
|
||
7FF5387D7000
|
unkown
|
page readonly
|
||
7FF56EA0B000
|
unkown
|
page readonly
|
||
7FF5B2843000
|
unkown
|
page readonly
|
||
7FF538724000
|
unkown
|
page readonly
|
||
7FF552E73000
|
unkown
|
page readonly
|
||
7FF56EC0E000
|
unkown
|
page readonly
|
||
20A1AF70000
|
unkown
|
page readonly
|
||
B7D7B7B000
|
unkown
|
page read and write
|
||
919227F000
|
unkown
|
page read and write
|
||
A09567E000
|
unkown
|
page read and write
|
||
7FF5E7BFB000
|
unkown
|
page readonly
|
||
7FF5CE847000
|
unkown
|
page readonly
|
||
7FF5B2964000
|
unkown
|
page readonly
|
||
7FF50A3EA000
|
unkown
|
page readonly
|
||
7FF538804000
|
unkown
|
page readonly
|
||
7FF5E7A77000
|
unkown
|
page readonly
|
||
7FF56EA17000
|
unkown
|
page readonly
|
||
7FF5B28DE000
|
unkown
|
page readonly
|
||
7FF5E7D44000
|
unkown
|
page readonly
|
||
7FF56EA00000
|
unkown
|
page readonly
|
||
25788830000
|
unkown
|
page read and write
|
||
7FF56ECA1000
|
unkown
|
page readonly
|
||
320A6F9000
|
unkown
|
page read and write
|
||
7FF56EBB5000
|
unkown
|
page readonly
|
||
7FF5B286C000
|
unkown
|
page readonly
|
||
14B6206E000
|
unkown
|
page read and write
|
||
2A3D6629000
|
unkown
|
page read and write
|
||
7FF50A1AB000
|
unkown
|
page readonly
|
||
7FF5E7C64000
|
unkown
|
page readonly
|
||
7FF5E78D5000
|
unkown
|
page readonly
|
||
71D9E7D000
|
unkown
|
page read and write
|
||
7FF56EC21000
|
unkown
|
page readonly
|
||
7FF5CE7D0000
|
unkown
|
page readonly
|
||
2A3D6626000
|
unkown
|
page read and write
|
||
7FF5387EC000
|
unkown
|
page readonly
|
||
7FF56E7C6000
|
unkown
|
page readonly
|
||
7FF5B20E1000
|
unkown
|
page readonly
|
||
7FF5B2783000
|
unkown
|
page readonly
|
||
7FF5E7D79000
|
unkown
|
page readonly
|
||
14B61F70000
|
heap default
|
page read and write
|
||
7FF5B26A5000
|
unkown
|
page readonly
|
||
7FF56EAF2000
|
unkown
|
page readonly
|
||
91922FA000
|
unkown
|
page read and write
|
||
7FF56E9D1000
|
unkown
|
page readonly
|
||
7FF56EC2D000
|
unkown
|
page readonly
|
||
7FF553046000
|
unkown
|
page readonly
|
||
7FF5B2971000
|
unkown
|
page readonly
|
||
14B6206A000
|
unkown
|
page read and write
|
||
7FF5CE8AD000
|
unkown
|
page readonly
|
||
291ADC00000
|
unkown
|
page read and write
|
||
7FF552EB1000
|
unkown
|
page readonly
|
||
25788813000
|
unkown
|
page read and write
|
||
7FF50A434000
|
unkown
|
page readonly
|
||
7FF5CE689000
|
unkown
|
page readonly
|
||
B7D7D7E000
|
unkown
|
page read and write
|
||
20A19500000
|
unkown
|
page read and write
|
||
7FF538814000
|
unkown
|
page readonly
|
||
7FF50A0C7000
|
unkown
|
page readonly
|
||
7FF5CE89E000
|
unkown
|
page readonly
|
||
7FF56EBAA000
|
unkown
|
page readonly
|
||
7FF5B2459000
|
unkown
|
page readonly
|
||
25788902000
|
unkown
|
page read and write
|
||
7FF5E7D00000
|
unkown
|
page readonly
|
||
71D9B7A000
|
unkown
|
page read and write
|
||
7FF537EA1000
|
unkown
|
page readonly
|
||
7FF50A392000
|
unkown
|
page readonly
|
||
24C5D83F000
|
unkown
|
page read and write
|
||
7FF50A469000
|
unkown
|
page readonly
|
||
7FF56EA91000
|
unkown
|
page readonly
|
||
7FF552ECB000
|
unkown
|
page readonly
|
||
1AA9FB90000
|
unkown
|
page readonly
|
||
20A1C010000
|
unkown
|
page read and write
|
||
1AA9F713000
|
unkown
|
page read and write
|
||
7FF5E7CEC000
|
unkown
|
page readonly
|
||
24C5D6A0000
|
heap default
|
page read and write
|
||
7FF5CE08D000
|
unkown
|
page readonly
|
||
291ADB00000
|
heap private
|
page read and write
|
||
7FF5CE711000
|
unkown
|
page readonly
|
||
7FF5B28F1000
|
unkown
|
page readonly
|
||
7FF5B2812000
|
unkown
|
page readonly
|
||
7FF5388A4000
|
unkown
|
page readonly
|
||
7FF5B281C000
|
unkown
|
page readonly
|
||
2A3D7000000
|
unkown
|
page readonly
|
||
90CF7F000
|
unkown
|
page read and write
|
||
7FF5530C2000
|
unkown
|
page readonly
|
||
7FF5E7CFA000
|
unkown
|
page readonly
|
||
9191FB9000
|
unkown
|
page read and write
|
||
7FF50A215000
|
unkown
|
page readonly
|
||
B7D787B000
|
unkown
|
page read and write
|
||
20A19513000
|
unkown
|
page read and write
|
||
2A3D6702000
|
unkown
|
page read and write
|
||
79BBFF9000
|
unkown
|
page read and write
|
||
7FF5E7B51000
|
unkown
|
page readonly
|
||
320A3BE000
|
unkown
|
page read and write
|
||
20A1B50A000
|
unkown
|
page read and write
|
||
20A1AE70000
|
unkown
|
page read and write
|
||
20A1B310000
|
unkown
|
page read and write
|
||
7FF5B27C6000
|
unkown
|
page readonly
|
||
7FF56EC04000
|
unkown
|
page readonly
|
||
7FF56E87A000
|
unkown
|
page readonly
|
||
22D19A29000
|
unkown
|
page read and write
|
||
7FF50A3EE000
|
unkown
|
page readonly
|
||
7FF56E8FB000
|
unkown
|
page readonly
|
||
7FF5B253C000
|
unkown
|
page readonly
|
||
7FF50A444000
|
unkown
|
page readonly
|
||
291ADD00000
|
unkown
|
page read and write
|
||
20A1B320000
|
unkown
|
page readonly
|
||
7FF5B28CA000
|
unkown
|
page readonly
|
||
A095BFF000
|
unkown
|
page read and write
|
||
1AA9F560000
|
unkown
|
page readonly
|
||
14B62102000
|
unkown
|
page read and write
|
||
7FF537E9B000
|
unkown
|
page readonly
|
||
7FF5B26D1000
|
unkown
|
page readonly
|
||
14B62100000
|
unkown
|
page read and write
|
||
79BBEFA000
|
unkown
|
page read and write
|
||
7FF5B254A000
|
unkown
|
page readonly
|
||
7FF56E9FE000
|
unkown
|
page readonly
|
||
22D1B470000
|
unkown
|
page read and write
|
||
7FF5B23E2000
|
unkown
|
page readonly
|
||
1AA9F602000
|
unkown
|
page read and write
|
||
A6C6A75000
|
unkown
|
page read and write
|
||
71D9F7F000
|
unkown
|
page read and write
|
||
20A1947F000
|
unkown
|
page read and write
|
There are 611 hidden memdumps, click here to show them.
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
http://bandam.feedestend.com/#YmFuZGFtQHNhY2NvdW50eS5uZXQ=
|